Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HlK6jLZUMcTTpYcEAeZy8IYcNFo.roa
File: HlK6jLZUMcTTpYcEAeZy8IYcNFo.roa (raw, json)
Hash identifier: 4/FXyST5rMdhtMgZNqoOichYDa+sb3Eu+lRLTIEZ748=
Subject key identifier: 1E:52:BA:8C:B6:54:31:C4:D3:A5:87:04:01:E6:72:F0:86:1C:34:5A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A6D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HlK6jLZUMcTTpYcEAeZy8IYcNFo.roa
Signing time: Fri 01 Sep 2023 10:07:53 +0000
ROA not before: Fri 01 Sep 2023 10:07:53 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10861 (0x2a6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:53 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1E52BA8CB65431C4D3A5870401E672F0861C345A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:67:15:09:8b:38:14:5d:5c:68:72:58:6d:fd:
a2:19:a6:5b:98:00:6e:ef:c1:77:60:56:47:e0:22:
30:05:0c:9d:88:9a:b4:7e:68:5c:85:16:80:d0:d8:
73:e3:9d:a0:45:99:44:60:79:51:9f:22:32:57:4c:
fe:41:fe:a1:58:b0:ea:ba:e2:ec:fc:26:29:6a:7a:
0e:38:3d:3d:6b:c3:7f:27:24:10:56:d4:24:2c:00:
03:e1:38:d3:59:2f:e5:45:73:ef:65:32:71:62:e7:
49:47:88:ce:2f:9c:ca:c4:d7:ae:cb:e4:f1:ba:5b:
bc:1a:b5:db:c7:e1:e1:03:0e:fa:fd:61:0c:21:e2:
10:4b:74:89:fc:06:61:a6:fd:3f:e5:7d:2a:ad:58:
d9:bd:a0:17:eb:f5:c7:ea:a2:cc:68:7b:f9:11:6f:
ae:bf:49:70:7e:c1:00:cc:c8:35:04:c4:a1:8d:d7:
1f:e8:75:c8:d3:0a:13:01:ca:c9:92:a5:5f:37:33:
7f:79:54:55:8a:d7:9a:96:cb:85:9f:a6:1c:34:c8:
2e:b4:fc:44:4a:53:12:db:8d:dd:92:81:40:23:54:
17:eb:47:15:fd:b3:9e:36:df:e6:fd:09:a3:e5:b2:
dc:0e:15:84:e6:8a:d4:c9:25:ef:bb:a9:08:e7:70:
06:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:52:BA:8C:B6:54:31:C4:D3:A5:87:04:01:E6:72:F0:86:1C:34:5A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HlK6jLZUMcTTpYcEAeZy8IYcNFo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.131.0/24
Signature Algorithm: sha256WithRSAEncryption
10:5c:94:3d:4f:5d:52:cb:46:c4:42:31:99:de:ff:c7:80:52:
cd:f9:5d:16:a1:ad:de:43:b1:26:7c:79:24:dc:0b:84:db:6b:
7a:97:a1:a9:52:0d:52:5a:15:25:db:4a:50:6e:45:3f:95:e7:
c5:4e:bc:79:5f:ee:02:1b:1e:f1:b2:8b:45:30:c6:2e:b4:16:
bb:1e:25:33:3d:bf:af:ac:da:8a:04:de:92:86:25:ad:d2:5b:
d2:98:59:b1:ae:5c:f8:68:bb:f0:c8:99:b3:7f:ec:6a:a0:dc:
64:9a:38:5a:cf:ce:f4:d0:af:f8:96:59:ff:4f:72:4b:6d:c7:
cb:b7:f6:c3:4c:16:11:85:15:30:f2:46:68:8f:ec:14:cf:c9:
dc:69:8c:60:64:19:0a:18:33:83:41:6a:0a:36:ff:4c:c7:60:
68:46:42:ea:23:fa:6a:11:f8:b3:59:be:ee:b8:95:df:2f:b5:
b3:98:82:9a:c0:5e:56:2d:57:22:36:e5:ea:7c:31:56:49:57:
2c:c5:9a:88:d6:52:44:9d:12:84:ca:d9:22:d1:d1:0d:0e:5a:
e8:35:9b:a0:d0:91:92:c5:cd:6e:1a:71:e0:20:57:ee:aa:85:
49:52:5e:1e:a1:29:ce:d2:c1:8f:00:8f:00:4c:c9:cc:3d:cc:
78:a4:0a:af
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKm0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA3NTNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDFFNTJCQThDQjY1NDMx
QzREM0E1ODcwNDAxRTY3MkYwODYxQzM0NUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCkZxUJizgUXVxoclht/aIZpluYAG7vwXdgVkfgIjAFDJ2ImrR+
aFyFFoDQ2HPjnaBFmURgeVGfIjJXTP5B/qFYsOq64uz8Jilqeg44PT1rw38nJBBW
1CQsAAPhONNZL+VFc+9lMnFi50lHiM4vnMrE167L5PG6W7watdvH4eEDDvr9YQwh
4hBLdIn8BmGm/T/lfSqtWNm9oBfr9cfqosxoe/kRb66/SXB+wQDMyDUExKGN1x/o
dcjTChMBysmSpV83M395VFWK15qWy4Wfphw0yC60/ERKUxLbjd2SgUAjVBfrRxX9
s5423+b9CaPlstwOFYTmitTJJe+7qQjncAYzAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUHlK6jLZUMcTTpYcEAeZy8IYcNFowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0hsSzZqTFpVTWNUVHBZY0VB
ZVp5OElZY05Gby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
AYMwDQYJKoZIhvcNAQELBQADggEBABBclD1PXVLLRsRCMZne/8eAUs35XRahrd5D
sSZ8eSTcC4Tba3qXoalSDVJaFSXbSlBuRT+V58VOvHlf7gIbHvGyi0Uwxi60Frse
JTM9v6+s2ooE3pKGJa3SW9KYWbGuXPhou/DImbN/7Gqg3GSaOFrPzvTQr/iWWf9P
ckttx8u39sNMFhGFFTDyRmiP7BTPydxpjGBkGQoYM4NBago2/0zHYGhGQuoj+moR
+LNZvu64ld8vtbOYgprAXlYtVyI25ep8MVZJVyzFmojWUkSdEoTK2SLR0Q0OWug1
m6DQkZLFzW4aceAgV+6qhUlSXh6hKc7SwY8AjwBMycw9zHikCq8=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org